$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft File: 21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft (raw, json) Hash identifier: aRI4jexRDTrYZgXkWs6MX9slSI8bwQop7uI7il69t2g= Subject key identifier: BA:27:DB:7D:D4:0C:50:30:77:AE:F0:EE:3A:34:CF:32:57:25:91:83 Authority key identifier: 21:E2:A7:0B:05:78:C6:74:B0:BF:1F:D7:BE:B3:B9:B2:A6:2A:2D:D8 Certificate issuer: /CN=21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8 Certificate serial: 10D84B91F947BAF5649AF91C8F54E4A43CEAD1CF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft Manifest number: 77 Signing time: Sun 14 Jun 2026 09:03:00 +0000 Manifest this update: Sun 14 Jun 2026 08:58:00 +0000 Manifest next update: Mon 15 Jun 2026 11:16:00 +0000 Files and hashes: 1: AS9814.roa (hash: aH13hMU8C8fNHVLNKEaUevRiNr6V/+fHSBOg4b/U2Rw=) 2: AS18241.roa (hash: KghwJGsdAFwKKaHyAzU5cWOTx1CTSMYVyT97Iq5hIVw=) 3: 21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.crl (hash: hi53aeuPDE/U5xXfGkZDcJ5VF+1WAlxVIytwvBBKPU4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.crl rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Jun 2026 09:25:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:d8:4b:91:f9:47:ba:f5:64:9a:f9:1c:8f:54:e4:a4:3c:ea:d1:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8 Validity Not Before: Jun 14 08:58:00 2026 GMT Not After : Jun 15 11:16:00 2026 GMT Subject: CN=BA27DB7DD40C503077AEF0EE3A34CF3257259183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:96:fd:99:58:7f:db:a9:d7:f8:38:e3:86:69: 2c:c5:63:d5:ba:b4:ec:26:26:b0:f2:71:8b:6f:a3: b8:e0:3f:45:33:ba:cf:d8:c4:cb:c3:3f:22:bd:35: fa:a4:ed:7f:2d:d5:3b:bd:22:d9:e0:18:98:0a:21: 9b:82:41:0a:03:ca:81:0d:21:c9:b5:82:2f:50:46: 76:18:e6:62:7f:b4:c2:2f:b2:36:30:81:3b:8c:a6: e2:a0:32:36:57:82:4b:2f:d1:e8:e0:ba:ed:8e:99: c8:9a:c0:ff:e7:06:8f:2f:dc:a3:91:1b:21:8a:3e: ee:07:ef:19:6a:53:16:68:54:d1:b7:d5:b5:79:d8: e3:27:f1:92:33:85:0a:6c:99:86:4a:0d:59:53:4b: 03:64:e2:02:98:a0:07:c8:c9:ad:ce:00:3d:7c:32: 23:8b:67:ce:a1:84:67:a3:14:cb:3f:15:d9:f3:3e: 2b:f6:0a:cc:62:e8:4f:3a:12:de:c6:cd:34:d4:38: 86:11:8e:d4:d8:5b:bb:db:4a:00:60:51:9e:3d:87: 63:dd:42:12:ad:9a:b1:78:60:86:59:40:a5:80:84: 3d:a1:65:ea:91:04:53:8f:c8:0c:58:a3:e1:f5:c1: e4:8d:3d:b3:fd:de:c4:69:a0:5c:00:17:13:6d:4b: e2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:27:DB:7D:D4:0C:50:30:77:AE:F0:EE:3A:34:CF:32:57:25:91:83 X509v3 Authority Key Identifier: keyid:21:E2:A7:0B:05:78:C6:74:B0:BF:1F:D7:BE:B3:B9:B2:A6:2A:2D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:74:ae:dc:67:c3:f8:da:b4:79:40:2a:f4:e5:b3:01:96:78: 94:85:47:19:c9:e9:79:b1:18:23:46:10:d3:4b:b5:b1:1a:8c: d8:b2:40:84:44:f9:13:f2:da:34:55:88:88:c0:9c:fb:d6:e8: 14:f3:95:59:b9:f2:08:6b:fa:8f:3a:48:76:20:06:3a:4c:89: 82:96:3f:82:3c:4c:92:87:35:57:16:78:27:6f:36:4d:55:38: b0:c4:1a:b3:95:aa:9b:fd:e0:6a:40:79:f6:7b:f0:c7:dd:d1: d3:d3:e2:62:4b:fd:c5:60:ba:45:00:b6:cd:1a:a4:16:75:c0: 3c:df:97:bf:b4:b7:0f:82:b2:5a:de:98:17:ff:5a:40:11:9e: e5:d1:1f:18:01:52:34:9d:0b:f0:8e:43:90:ae:e3:a6:89:b3: 90:3c:36:9b:6c:2f:cd:87:2e:6e:db:0b:43:97:be:e8:0e:46: fb:15:b6:06:50:bd:f1:94:4f:09:eb:8c:3c:cc:53:6d:07:d3: a7:38:e5:b6:ec:b9:ba:74:34:8b:81:bf:7a:ae:cd:6a:df:b7: 14:96:a4:5c:ac:9e:84:01:be:80:64:3c:6b:88:d7:03:b0:85: ec:4f:ad:94:78:cc:a5:0e:cf:c5:8c:d5:fa:81:f9:23:cd:cc: a2:54:0d:65 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUENhLkflHuvVkmvkcj1TkpDzq0c8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFFMkE3MEIwNTc4QzY3NEIwQkYxRkQ3QkVCM0I5QjJB NjJBMkREODAeFw0yNjA2MTQwODU4MDBaFw0yNjA2MTUxMTE2MDBaMDMxMTAvBgNV BAMTKEJBMjdEQjdERDQwQzUwMzA3N0FFRjBFRTNBMzRDRjMyNTcyNTkxODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPlv2ZWH/bqdf4OOOGaSzFY9W6 tOwmJrDycYtvo7jgP0Uzus/YxMvDPyK9Nfqk7X8t1Tu9ItngGJgKIZuCQQoDyoEN Icm1gi9QRnYY5mJ/tMIvsjYwgTuMpuKgMjZXgksv0ejguu2OmciawP/nBo8v3KOR GyGKPu4H7xlqUxZoVNG31bV52OMn8ZIzhQpsmYZKDVlTSwNk4gKYoAfIya3OAD18 MiOLZ86hhGejFMs/FdnzPiv2Csxi6E86Et7GzTTUOIYRjtTYW7vbSgBgUZ49h2Pd QhKtmrF4YIZZQKWAhD2hZeqRBFOPyAxYo+H1weSNPbP93sRpoFwAFxNtS+KhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUuifbfdQMUDB3rvDuOjTPMlclkYMwHwYDVR0j BBgwFoAUIeKnCwV4xnSwvx/XvrO5sqYqLdgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI0MTY2NjY5Nzg1NDk3OS8wLzIxRTJBNzBCMDU3OEM2NzRCMEJGMUZEN0JFQjNC OUIyQTYyQTJERDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjFFMkE3MEIwNTc4QzY3NEIwQkYxRkQ3QkVCM0I5QjJBNjJBMkREOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNDE2NjY2OTc4NTQ5NzkvMC8yMUUyQTcwQjA1NzhD Njc0QjBCRjFGRDdCRUIzQjlCMkE2MkEyREQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUXSu3GfD+Nq0 eUAq9OWzAZZ4lIVHGcnpebEYI0YQ00u1sRqM2LJAhET5E/LaNFWIiMCc+9boFPOV WbnyCGv6jzpIdiAGOkyJgpY/gjxMkoc1VxZ4J282TVU4sMQas5Wqm/3gakB59nvw x93R09PiYkv9xWC6RQC2zRqkFnXAPN+Xv7S3D4KyWt6YF/9aQBGe5dEfGAFSNJ0L 8I5DkK7jpomzkDw2m2wvzYcubtsLQ5e+6A5G+xW2BlC98ZRPCeuMPMxTbQfTpzjl tuy5unQ0i4G/eq7Nat+3FJakXKyehAG+gGQ8a4jXA7CF7E+tlHjMpQ7PxYzV+oH5 I83MolQNZQ== -----END CERTIFICATE-----Generated at Sun Jun 14 12:46:02 2026 by rpki-client